2023 Delta Dental - MOVEit vulnerability breach; New York DFS penalty in 2026
Data compromised
Names, addresses, Social Security numbers, financial account details, and patient health information
Technical writeup
New York regulators announced a $2.25 million settlement with Delta Dental Insurance Company and Delta Dental of New York in 2026 after finding cybersecurity failures tied to a MOVEit Transfer breach. Reporting said hackers exploited a known MOVEit vulnerability after regulators had alerted companies to the risk in June 2023. Delta Dental notified affected consumers by March 2024; the settlement announcement described exposure of sensitive data belonging to New Yorkers.
Root cause
Exploitation of known MOVEit Transfer vulnerability combined with alleged cybersecurity-program and reporting failures
References
- https://www.fingerlakes1.com/2026/05/01/state-secures-2-25m-penalty-against-delta-dental-over-data-breach-failures/
- https://www.mlex.com/articles/2471925/delta-dental-agrees-to-pay-2-25m-to-resolve-new-york-allegations-over-data-breach
- https://www.law360.com/articles/2472731/nydfs-fines-delta-dental-2-25m-over-moveit-data-breach